Privacy Policy / Datenschutzerklärung

Controller and contact

The person responsible for processing personal data on this website (the controller) is Johannes Gäbler, c/o Stephan Gäbler, Dresdner Straße 17, 01465 Dresden-Langebrück, Germany. For privacy questions or to exercise your rights, please contact me at hello@moneymattersmedia.com.

This policy applies to the public Money Matters Media blog.

If you choose to subscribe, I use your email address to send future Money Matters articles and newsletter updates about investing, finance and related topics. The newsletter has not launched yet. Signing up is voluntary and is not required to read the website. The legal basis is your consent under Article 6(1)(a) GDPR and, for marketing emails, the applicable email marketing rules, including section 7(2), no. 2 UWG in Germany.

The consent checkbox is unchecked initially and must be selected. After you submit, Kit sends an email asking you to confirm your address. New subscribers remain unconfirmed until they follow that confirmation link. I send newsletter updates only to confirmed subscribers who have not unsubscribed.

I use Kit, provided by Kit, Inc., as the email marketing processor. Signup information goes directly from your browser to Kit. Kit manages email addresses, confirmation and unsubscribe status, delivery, and subscription records. I do not maintain a separate subscriber database on this website or in Article Lab.

The form sends your email address, the selected consent tag, consent wording and version, and the signup source to Kit. Kit also receives technical request data, such as your IP address and request time, to operate and protect the service. The website does not load a Kit marketing script or set a newsletter tracking cookie. Opening a Kit-hosted page may involve additional processing by Kit.

Kit records email delivery, email opens and link clicks, including for confirmation emails. Opens may be detected by a small image loaded from the email, and clicks may be measured through Kit's links. These statistics help check delivery and understand how Money Matters emails are used. Mail privacy services and security scanners can also trigger these measurements, so an event does not reliably establish that you personally opened an email or clicked a link.

Kit's Data Processing Addendum describes its processing of newsletter subscriber data. Kit processes data in the United States and may use subprocessors in other countries. Kit describes international transfer safeguards including the EU–U.S. Data Privacy Framework and Standard Contractual Clauses. Details and applicable safeguards are available through Kit's DPA and GDPR information; you may also contact me.

You may withdraw your consent at any time through Kit's unsubscribe link in newsletter emails or by contacting hello@moneymattersmedia.com. Withdrawal does not affect the lawfulness of earlier processing. Unsubscribing stops future newsletters. Kit may retain an unsubscribe record to prevent further sending. I retain subscription information while you subscribe; after withdrawal, only information needed to respect the withdrawal, demonstrate consent or address legal claims is retained for as long as necessary. Unconfirmed requests are reviewed and removed when they are no longer needed.

Your rights below apply to newsletter information too, including access, correction, erasure and portability where the legal conditions apply.

Website delivery and Cloudflare traffic analytics

The website is delivered through Cloudflare. Cloudflare identifies its provider as Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. When you access the website, technical connection and request data is processed, including your IP address, the time of the request, the requested address, the HTTP status and information about your browser, operating system and device. This data is used to deliver the website, operate it securely and produce website traffic statistics, including for visits from the EU.

The legal basis for the processing I arrange is Article 6(1)(f) GDPR. My legitimate interests are delivering the blog reliably and securely and understanding its use. Cloudflare also processes data for its own operational and security purposes, as described in its privacy policy.

Cloudflare Web Analytics

Cloudflare Web Analytics is also enabled with the setting “Enable, excluding visitor data in the EU”. The exclusion operates according to the region of the Cloudflare data center processing the request. For visits outside the excluded regions, a browser script may collect performance and usage data and send it to Cloudflare, such as loading, rendering and response times, the page visited, the referring page and an identifier generated for that page load. I use these statistics to understand the blog’s use and technical performance.

According to Cloudflare, its RUM script does not use cookies or access localStorage, sessionStorage or IndexedDB. Cloudflare states that the IP address received with a RUM request is discarded at the nearest data center and is not stored in its core RUM databases or logs. This statement does not apply generally to other Cloudflare request data.

Where the analytics I arrange involves personal data, I rely on Article 6(1)(f) GDPR. My legitimate interest is a limited analysis of the blog’s use and performance.

Cloudflare: retention and international processing

Cloudflare processes data across its international network. Processing outside the EU or European Economic Area (EEA), particularly in the United States, is possible. According to its privacy policy, Cloudflare relies on the EU-U.S. Data Privacy Framework for relevant transfers to the United States and uses Standard Contractual Clauses for other relevant international transfers. Information about these mechanisms and safeguards is available in Cloudflare’s privacy policy; you can also contact me.

Cloudflare describes purpose-based retention criteria, including the purpose of processing, security needs and legal obligations. For Web Analytics, the provider states that unsampled data is available for seven days, followed by a reduced sample, and that its dashboard provides access to the previous six months. Dashboard availability is not a general deletion deadline for all Cloudflare data.

Only I currently have access to my Cloudflare account. I do not routinely export analytics, visitor or request data to other systems, and I do not maintain separate local copies of Cloudflare analytics data.

Contact by email

If you contact me at hello@moneymattersmedia.com, I process your email address, the information you provide, any attachments and normal email metadata to handle and respond to your enquiry. The legal basis is Article 6(1)(f) GDPR. My legitimate interest is handling and responding to incoming enquiries.

I use Tuta Mail, provided by Tutao GmbH, Deisterstr. 17a, 30449 Hannover, Germany, to receive and store email. According to the provider, data is stored in data centers in Germany. Only I have access to my mailbox. No forwarding to another mailbox is currently configured; I do not routinely export correspondence or maintain separate local copies.

Correspondence is retained for as long as necessary to process your enquiry and any reasonable follow-up, and is then deleted unless legal obligations or other legitimate reasons require longer retention.

Appearance preference in your browser

When you switch between light and dark mode, the website saves your choice as “light” or “dark” in your browser’s localStorage under the key “theme”. This preference contains no user identifier and is not sent to my server. Its sole purpose is to remember your chosen appearance on subsequent page visits.

The entry has no fixed expiry date. You can remove it by clearing this website’s data in your browser or replace it by choosing a different mode. Storage serves the appearance you expressly request under section 25(2), no. 2 of the German Telecommunications Digital Services Data Protection Act (TDDDG). Where personal data is involved, Article 6(1)(f) GDPR provides the legal basis for my interest in providing your chosen appearance.

External links

Articles and the About page may contain links to other websites. If you follow a link, the destination’s provider processes data collected there under its own privacy notice. An ordinary link does not load the linked service while you are reading the blog page.

Your rights

Subject to the applicable legal conditions, you may request access to your personal data, its correction or deletion, or restriction of processing. You also have a right to data portability where the conditions apply. If processing is based on your consent, you may withdraw that consent at any time with effect for the future.

Where I process data on the basis of Article 6(1)(f) GDPR, you have a right to object under Article 21 GDPR on grounds relating to your particular situation. Please contact hello@moneymattersmedia.com to exercise this right.

You also have the right to lodge a complaint with a data protection supervisory authority, particularly in the Member State of your habitual residence, place of work or the place of the alleged infringement. Providing information by email is voluntary; without the information needed to handle an enquiry, I may be unable to respond.